Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
16.2 KB · 16,204 B
First seen
2026-07-25 10:31 · 3 months ago
Last seen
2026-07-25 10:31 · 3 months ago
Last analysis
2026-07-26 04:58 · 3 months ago
Hashes
MD5 50e90bc3eb0c539496cc129cb5ab93d1 Sha1 152e57ccfcdbe3b80049eaa9f50f9b14512bec4e Sha256 07ac073adc713327eb4b3948d0824aace99771051aa3f94d951bc9942d08f653 Sha384 7b1c78ff5d831fa6abf133b68bd343827c704dfae5409f1d1ba0cd7683d89cc7443f933c8ec80e4a2774f79935dd35b9 Sha512 8fe226bb091fd22588609d4c3241b148a9606efb4e0f95aa0da7c5f127c0a4e55822c31f585222d34f4f0a3aab44865cb90e7f37c90f0b8f28c4c4f22373fec1 SSDeep 384:5uztm3E6k15LjfXlGseyFZ7+h5Y0m+WC520Lp:uhhXlfAWCrLp TLSH 1072E1B2BC5124C9AD7325FAA4319EB994981DFA33C358C1DE168F2FB4744738C25583
3 malicious · 4 files
ZIP50e90bc3eb0c539496cc129cb5ab93d1LOLBin
MP4VID_20260725_084051.mp4
LNKIMG_20260725_032315.jpg.lnkLOLBin
SHLNK CommandLine
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 4 files
ZIP50e90bc3eb0c539496cc129cb5ab93d1LOLBin
MP4VID_20260725_084051.mp4
LNKIMG_20260725_032315.jpg.lnkLOLBin
SHLNK CommandLine
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
50e90bc3eb0c539496cc129cb5ab93d1 › IMG_20260725_032315.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙